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Case ID #: 288A-WF-238943 {Pending) 

Title: UNSUB(S); 

US COURTS - VICTIM ; 
COMPUTER INTRUSION - OTHER 

Synopsis: To set lead to locate Aaron swartz. 



Enclosure (s) : Attached is an 



Report for Swartz . 



Details: The U.S. Courts implemented a pilot project offering 
free access to federal court records through the PACER system at 
seventeen federal depository libraries. Library personnel 
maintain login and password security and provide access to users 
from computers within the library. PACER normally carries an 
eight cents per page fee, however, by accessing from one of the 
seventeen libraries, users may search and download data for free. 

Between September 4, 2008 and September 22 , 2008, PACER 
was accessed by computers from outside the library utilizing 
login information from two libraries participating in the pilot 
project. The Administrative Office of the U*S, Courts reported 
that the PACER system was being inundated with requests. One 
request was being made every three seconds. 

The login information was compromised at the Sacramento 
County Public Law Library (SPLL) and the Seventh Circuit Court of 
Appeals Library (SCCA) . The two accounts were responsible for 
downloading more than eighteen million pages with an approximate 
value of $1.5 million. 
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To: Chicago From: Washington Field 
Re: 288A-WF-238943, 02/06/2009 



During the compromise, there was one continuous session 
with one log in and access was made every one to two seconds. 
The compromise took place during regular business hours. Data 
that was exfiltrated went to one of two Amazon IP addresses. 

Investigation has determined that the Amazon IP address 
used to access the PACER system belongs to Aaron Swartz. 

The following information was provided for the IP 

address : 

Name i Aaron Swartz 

Address: 34 9 Marshman Avenue 

Highland Park, IL €0035 
Telephone: 847-432-8657 

A search in | l and Swart z's personal webpage 

confirmed this information, Swartz 's social security account 
number is 360-84-049 3 . The telephone subscriber for telephone 
number f | is | ~| 

NCIC report for Aaron Swartz was negative, A search 
for wages for Swartz at the Department of Labor was negative. 
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To: Chicago From: Washington Field 
Ret 288A-WF-238943, 02/06/2009 



LEAD (s J : 

Set Lead 1 : (Action) 

CHICAGO 

AT NORTH RA 

Washington Field Office requests that the North RA 
attempt to locate AARON SWARTZ , his vehicles, drivers license 
information and picture, and others, at 34 9 Marshman Avenue, 
Highland Park, IL 60035. Since SWARTZ is the potential subject 
of an ongoing investigation, it is requested that SWARTZ not be 
approached by Agents. 



sa[ 



If there are any Questions or conc erns, please contact 
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Case ID #: 288A-WF-238 943 {Pending) 

Title: UNSUB(S); 

US COURTS - VICTIM; 
COMPUTER INTRUSION - OTHER 

Synopsis: To set lead to locate Aaron Swartz. 

Enclosure ( 3) : Attached is an | 



b7E 



Report for Swartz . 



Details: The U.S. Courts implemented a pilot project offering 
free access to federal court records through the PACER system at 
seventeen federal depository libraries. Library personnel 
maintain login and password security and provide access to users 
from computers within the library, PACER normally carries an 
eight cents per page fee, however, by accessing from one of the 
seventeen libraries, users may search and download data for free. 



Between September 4, 2008 and September 22, 2008, PACER 
was accessed by computers from outside the library utilizing 
login information from two libraries participating in the pilot 
project. The Administrative Office of the U.S. Courts reported 
that the pacer system was being inundated with requests. One 
request was being made every three seconds. 

The login information was compromised at the Sacramento 
County Public Law Library {SPLL) and the Seventh Circuit Court of 
Appeals Library (SCCA) . The two accounts were responsible for 
downloading more than eighteen million pages with an approximate 
value of $1.5 million. 
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To: Chicago From: Washington Field 
Re: 288A-WF-238943, 02/06/2009 



During the compromise, there was one continuous session 
with one log in and access was made every one to two seconds. 
The compromise took place during regular business hours. Data 
that was exfiltrated went to one of two Amazon IP addresses. 

Investigation has determined that the Amazon IP address 
used to access the PACER system belongs to Aaron Swartz, 

The following information was provided for the IP 

address : 



Name ; Aaron Swartz 

Address: 34 9 Marshman Avenue 

Highland Park, IL 60035 
Telephone: 847-432-8857 

I 1 b?E 

A search in| | Swartz' s personal webpage 

confirmed this information. Swartz' s social security account 

number is 360-84-049 3, The telephone subscriber for telephone 

number | 1 is 



NCIC report for Aaron Swartz was negative. A search 
for wages for Swartz at the Department of Labor was negative. 
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UNCLASSIFIED 



To: Chicago From: Washington Field 
Re: 288A-WF-238943, 02/06/2009 



LEAD (s) : 



Set Lead 1: (Action) 



CHICAGO 



AT CHICAGO, ILLINOIS 

Washington Field Office requests that Chicago attempt 
to locate AARON SWARTZ , his vehicles, drivers license information 
and picture, and others, at 349 Marshman Avenue, Highland Park, 
IL 60035, Since SWARTZ is the potential subject of an ongoing 
investigation, it is requested that SWARTZ not be approached by 
Agents , 



SA 



Tf there Firs anv onesr.i ens or concerns, please contact 
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Contact: SA 
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Drafted By: | | 

Case ID #: 288A- WF-238943 

Title: UNSUB(S}; 

US COURTS - VICTIM; 
COMPUTER INTRUSION - OTHER 

Synopsis: Lead covered by Chicago North RA 



Enclos ure (s) : Illinois PL/ID Image of Swartz and f 

1 

Details: Attempted to locate AARON SWARTZ , his vehicles, drivers 
license information and picture, and others at 349 Marshman 
Avenue, Highland Park, IL 60035. 

Successfully located drivers license photo for SWARTZ. 
Drove by address in an attempt to locate SWARTZ or vehicles 
related to the residence, but was unsuccessful. House is set on 
a deep lot, behind other houses on Marshman Avenue. This is a 
heavily wooded, dead-end street, with no other cars parked on the 
road making continued surveillance difficult to conduct without 
severely in creasing t he risk of discovery. However, drivers 
license and | | information lists address above. Other 

family members are listed a g currant resi dence and four vehicles 
are currently registered to 1 I who resides at above 

address. Illinois database checks tor SWARTZ yielded negative 
results. SWARTZ has no arrests, no registered vehicles or 
property. 
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UNCLASSIFIED 



To: Washington Field From: Chicago 
Re: 288A-WF-238943, 02/24/2009 



Chicago considers this lead covered. 
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To: Washington Field From: Chicago 
Re: 288A-WF-238943, 02/24/2009 



LEAD (a) : 

Set Lead 1: (Info) 

WASHINGTON FIELD 

AT WASHINGTON DC 
Read and clear. 
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Date of transcription 02/19/2009 

AARON SWARTZ has a profile on the website LINKEDIN, at 
www, linked., n . com/ in/aaronsw . SWARTZ is listed as a writer, hacker 
and activist based in the San Francisco Bay Area. SWARTZ ■ s 
education includes Stanford University, Sociology, 2004. SWARTZ 1 s 
experience includes the following: 

Founder of watchdog.net 
2008 - Present 

Tech Lead at Open Library 
2007 - Present 

Co-founder of reddit 
November 2005 - January 2007 

Metadata Advisor at Creative Commons 
2002 - 2004 

Member of RDF Core Working Group 
1999 - 2000 

Member of W3C 
1999 - 2000 

The website watchdog.net: the good government site with 
teeth states that "We're trying to build a hub for politics on the 
Internet". This plan includes pulling all information about 
politics, votes, lobbying records, and campaign finance reports 
together under one unified interface. SWARTZ posted blogs on 
07/30/2008, 06/16/2008, 05/07/2008, 04/21/2008, 04/16/2008, 
04/14/2008, 

SWARTZ has a profile on the website FACEBOOK. His 
networks include Stanford '08 and Boston, MA, The picture used in 
his profile was also used in an article about SWARTZ in THE NEW 

YORK TIMES. 

SWARTZ' s personal webpage, www. aaronsw.com. includes a 
section titled "Aaron Swartz; a lifetime of dubious 
accomplishments". In 2007, SWARTZ began working full-time as a 
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Cofldnuaton of FD-302 of SWART2 ' g online Profiles - 02/15/2009 . Page 

member of the Long-Term Planning Committee for the Human Race 
(LTPCHR) . 
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dm of ttumripowi Q2/19/2009 

On F ebruary 17, 2008, SA | | received an email from 

I | Administrative Office or tne JS Courts, with links 

to two published articles regarding the compromise of the PACER 

system. 

On February 12, 2009, I I published an article 

in THE NEW YORK TIMES titled "An Effort to Upgrade a Court Archive 
System to Fre e and Easy". For the article, I I interviewed 

| [ and AARON SWARTZ regarding the compromise of the PACER 

system. 

The following information is found in the article: 



| 1 urged fellow activists to go to the seventeen 



libraries offering the free trial, download as many court documents 
as they could, and send them to him for republication on the Web. 

SWARTZ rea d! ~l appeal and downloaded an estimated 

twenty percent (20%) of the PACER database. 

| | a Government Printing Office official, 

told librarians that the security of the PACER service was 
compromised and the FBI was conducting an investigation. 



Lawyers for | ] and SWARTZ told them they had broken 

no laws. 

On February , 2009, I I and I I 

published an article in The LEDE, NOTES ON THE NEWS , FROM THE HEW 
YORK TIMES titled "Steal These Federal Records - Okay, Not 
Literally" . 

The following information is found in the article: 



I I: 

i j where h 



published an online manifesto about freeing PACER 



documents, where he called for a Thumb Drive Corps to go to 
libraries with small thumb drives, plug them into computers, 
download as many court documents as they could, and send them to 

~| so that he can translate them into a format that GOOGLE'S 
search software can read. 



LttMUgifen «i 02/17/2009 *« Manassas, VA 
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Continuation of FD-302 of | | , O g / 1 7 /' 2 9 , Page 

SWARTZ receiv ed software that downloaded documents from 
the PACER database from I I at the BERKMAN CENTER FOR 

INTERNET AND SOCIETY AT HARVARD . swartz improved this software, 
saved it on a thumb drive, and had a friend in California take the 
thumb drive to one of the free libraries and upload the program. 

When the PACER system was shut down with no notice, 
told SWARTZ "You need to talk to a lawyer. I need to talk 



to a lawyer . 11 

Lawyers told l | and S WARTZ tha t they appeared to 

have broken no laws . At that point , \ | sent SWARTZ a text 

message saying "You should just lay low for a while." 
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Date of w ascription 03/09/2009 

AARON SWARTZ posted a weblog titled "NYT Personals" at 
http: //www.aaronsw. com/weblog. In the weblog, SWARTZ quotes the 
NEW YORK TIMES article in which he was interviewed. SWARTZ also 
posts "Want to meet the man behind the headlines? Want to have the 
P.B.I, open up a file on you as well? Interested in some kind of 
bizarre celebrity product endorsement? I'm available in Boston and 
New York all this month" . 
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On March 10, 2009, 

OFFICE OF THE US COURTS (US COURTS ) provided 
information: 



of THE ADMINISTRATIVE 
the following 



US COURTS was relying on the Notice written on the login 
page of the PACER webpage, pacer.uscourts.gov, to advise users that 
unauthorized access to the PACER system is not allowed. When a 
user goes to the webpage and navigates to the login page, a Notice 
is shown at the bottom of the page that states "NOTICE : This is a 
Restricted Government web Site for official PACER use only. 
Unauthorized entry is prohibited and subject to prosecution under 
Title 18 of the U.S. Code. All activities and access attempts are 
logged. " 

When asked to clarify how a user knows what constitutes 
unauthorized access and how a user would have known that they had 
to be in one of the seventeen libraries to access PACER, | | 
ha d \ prepare a response. 



[ 



provided the following information: 



AARON SWART2 would have known his access was unauthorized 
because it was with a password that did not belong to him. 

Library patrons did not sign up for accounts. One login 
and password were provided to each Federal Depository Library. 
Each library agreed to not share the password with any organization 
or individual user. Verification forms were signed by Depository 
Coordinators at each library and included statements regarding 
login and password security. 

The Seventh Circuit Court of Appeals in Chicago had a one 
hour time limit on their public access computer and the computer 
was completely logged off after each session by a staff member . 



[P ACER home page and login page print -outs, emails from 
and | | and Federal Depository Library /PACER 



verification Forms are attached.] 
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Dale of transcnptioii 04/14/2009 



On 04/14/2009, SA | :alled (847) 432-8857 in an 

attempt to speak to AARON SWARTZ . ETTemale answered the telephone 
and stated that SWARTZ was not available at that telephone number 
any longer and that swartz did nni- have another number where he 
could be reached. SA I I left a message tor SWARTZ to return 

her call and the female stated that she would email that message to 
SWARTZ . 



SWARTZ called SA | and left a message on her 

voicemail stating he could be reached at (847) 877-8895. This 
number is a T-Mobile cellu lar number and returned negative results 

b7E 

SA | [ spoke to SWARTZ, at telephone number (847) 

877-8895, ana explained that the FBI is looking for information on 
how SWARTZ was able to compromise the PACER system so that the US 
COURTS could implement repairs to the system and get PACER running 
again. SWARTZ stated t hat he woul d have to talk to his attorney 
first and would call SA | ~~| back at a later time. 



investigation on 04/14/2009 at Manassas , VA 
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Dale oK transcription Q4/15/2QQ9 



)4/l5/2009, SAl 
who had left a 
telephone number is 



returned a telephone call to 



3 



YQif^mail message for sa[ 



and his email address 



asked if the FBI had an official invpgHnaH ^ 

open or if this was just information gathering. SA I | 
responded that there was an open invest igation. I I asked if 

he needed an attorney and SA I Ire soon ded that she could not 

advise him on that matter, SA l b old I | that AARON 

SWARTZ was told in a conversation yesterday that we are looking for 
information into how the comprom ise occurre d so that the US COURTS 
can get PACER operational ag ain, f besponded with "I can not 

tell you how Aaron did it," | I was a | [ and 

understands the security system ot PACER and can speaK to that . 



invocation on 04/15/2009 at Manassas, VA 
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D»te or iMucriptHHi 04/16/2009 
cr. Q4/1G/2QQ9, SaI Ireturned a telephone cal l to 



H6st6n, MA. I W ilted a ssurance that it ijWAKTZ wa£ intervie wed, 



what he said would not be used to jeopardize him, 
explained that assurance coul d not be given but that we were in an 
information gathering phase. I I refused the interview without 
the assurance, 1 1 



m v «i»gaikw on 04/16/2009 at Manas s as, VA 
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Case ID #: 28 8A-WF- 238943 (Closed) 

Title: UN SUB (S) ; 

US COURTS - VICTIM; 
COMPUTER INTRUSION - OTHER 

Synopsis: To close case. 

Details: For background, the U.S. Courts implemented a pilot 
project offering free access to federal court records through the 
PACER system at seventeen federal depository libraries. From 
September 4 - 22, 2008, PACER was accessed by computers from 
outside the library utilizing login information from two 
libraries participating in the pilot project. The login 
information was compromised at the Sacramento County Public Law 
Library and the Seventh Circuit Court of Appeals Library. The 
two accounts were responsible for downloading more than eighteen 
million pages with an approximate value of $1.5 million. 

Investigation determined that the Amazon IP address 
used to access the PACER system bel ongs to Aaron Swartz, Swartz 
refused an interview with the FBI . | | 

| | Swartz on his website pacer.resource.org, 

was interview oy tne FBI on April 15, 2009, Both Swartz and 

I ~y ere interviewed by the New York Times, regarding the 

compromise of the PACER system. 
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UNCLASSIFIED 

To: Cyber From: Washington Field 
Re: 288A-WF-238943, 04/20/2009 



CCIPS Attorney I I closed the office's case. 

Based on the CCIPS closing, Washington Field is closing this case 
as of this communication. 



UNCLASSIFIED 



UNCLASSIFIED 



To: Cyber From: Washington Field 
Re: 288A-WF-238943, 04/20/2009 

LEAD (a) : 

Set Lead 1: (Info) 

CYBER 

AT CIU-1 

Read and clear. 
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